removed basic auth from the update-stream route

this hopefully will fix sse issues
a handful of fixes to hopefully solve ec2 CORS issues
Merge pull request #36 from paulgrock/unprotectServerSentRoute

Unprotect server sent route