Key words
Add specific error types (closes #1)

UnauthorizedError is passed down the middleware chain.  ConfigError is thrown (ideally, before the server starts).