buckets: added acl json parser, moved common buckets code to buckets.go
auth: added 'input' auth support (see rift documentation) - auth checks upload/delete handlers, but doesn't yet sign own operations to storage