fixed sql, added notes to auth page
Auth/Api now returns 403 on bad request, and 500 on exceptions
Tweaked color on notes in auth page