Authentication working

Authorization still hard-coded, but functional