some docs; refactor authorization as a controller filter
- load thumbnails for playlist async. - use youtube client lib v3 for search