Moving tools into separate (allowing for easier authentication), adding in basic auth header check (though no validation of what is returned yet)