progress on authenticated handlers
auth flow complete?
fix readme
more readme
more readme
refactor xhr session management
authenticated non-rest requests
make sure auth flow actually works
auth complete