Hacked up some quick and dirty authentication. We need to force SSL somehow.