added unauthorized error
auth.js to manage authentification for users with tokens.  Still untested.
fixed auth requireUserToken route
added auth for a global apptoken for the api