Initial auth commit.

This is meant to start a discussion on auth and critique on my testing. 
As I mentioned above, using Jersey we can take advantage of Jersey and it's HTTP return types.  So this should return 404 not found since we're requesting a user resource.