trim whitespace from credentials if passed manually. Confirm we get a 401 on an incorrect authToken.  fixes #6