Added specs and proper 401s on missing user.
Merge pull request #1 from dblock/specs

Added specs, proper 401s on missing user, etc.