Fixed DI, fixed auth

Fixed Ninject DI for Web API controllers.  Fixed authentication
client-side (still need to wire up backend).