Apache oauth

Ability to substitute basic authentication with oauth.  Also adds a basic auth hole for the "events" path.