Make sure plugin requests require auth as well.
gitreceive needs auth when contacting controller.
Properly generate an auth key for gitreceive.
Proper http status code for unauthorized.
Generate auth key if it is missing.