We should really move the authentication code into a decorator so that way authentication doesn't need to be retested in each method, but rather just checked to ensure it was called.

But I suppose we can do that in another pull request (if we choose this route, add a TODO).