add auth handler.

GET /auth will allows a user to authenticate against gaffer and retrieve its
api key.