first part of transition to oauth2
Merge pull request #29 from cni/kevin-auth

first part of transition to oauth2