- cleanup db.connect()
- all requests now require user/password
- make /organization use the standard Resource class