explicit allow PUT
update principal update test and add more logging for failed authentications
add require for log
add more logging to user authentications
send 401, not 400
log password hash for debugging
all agents should be in the database, update static agents on load
message_type -> type