auth: return wildcard '*' user if auth header is not present or contains garbage
bucket: added auth read/write flags and check them during operation. If auth flags in bucket do not allow operation, return forbidden error