fixing auth to allow user auth
Merge branch 'master' of github.com:paultag/lucy
add some protection to server methods