Added token authentication.
Locked down routes (for security) and added more tests.