Session response returns correct credentials
Bad cred response returns false and error message
Add canned response for reads endpoint
Fix typo
Use correct token param key
Add ping endpoint
Always send CORS headers
Pulls authentication into method and routes opt-in
Returns correct status code with bad credentials