Initial auth implementation

**Work in Progress**

@raymondfeng - this is what I was thinking for authorization.