Login authentication working!

Still messy. The header for authorization is still hardcoded