Gt 20

Auth endpoint has been created. Once page is accessed a new authToken is generated and returned as a header.
I don't believe you need to inject an `AuthorizationRecord` here.  It would be more appropriate to directly call its constructor in the methods below.