Added server side security stuff
added login listener (but it won't work)
got basic auth stuff going
locked down the catalog
a few tweaks, un-restricted the describe stuff because it breaks things like the data browser
just testing stuff for sessions