Removed client side path authorization (false securtiy), stubbed in
methods and tests for new auth service
Built out some auth functions and testing (not real world tested yet)
Hooked up global unauthorized handler and successfully forwarding to
login page when needed.