Initial auth commit.

This is meant to start a discussion on auth and critique on my testing. 
Whoops got my status codes mixed up on 401/403, we'd want to return 401 when the auth fails, and 403 if they make a request w/o signing it correctly.  As for the 404, when no user is pulled from the database a 404 should be returned because per the HTTP spec 404 is "Resource Not Found".  Calling a method that doesn't exist is a 501 http://en.wikipedia.org/wiki/List_of_HTTP_status_codes#5xx_Server_Error.  

As for what to actually return we're going to use Jersey again.  Just set the content type for the route and return the bean you want.  Jersey will take care of the serialization.  Per this:  https://jersey.java.net/documentation/1.18/json.html