Initial auth commit.

This is meant to start a discussion on auth and critique on my testing. 
 using Jersey we can take advantage of Jersey and it's HTTP return types. So this should return 404 if we don't find a user or 403 if their password doesn't work.