Use Auth header instead ofrequest data to allow alternate HTTP methods
include tiem in auth headers for sig verification
fix last small issues on client and server to get killUser working