Testing auth.
Add oauth2 to server. /api/images on access control now.