Implement authentication

[rapPayne]

As of now all REST routes are wide open. Make authentication work. Then protect routes.