More changes.  Added authorization explicitly for route methods, as well as wrapped run() with a distinctive exception handler