Api authorisation

Closes #63 
Hmmm, I wonder if we shouldn't `sort` and the `skip` and `limit`? (`find(...).sort(...).skip(...).limit(...)`)

Take the following scenario: let's say there's enough data for two pages and we're requesting the second page. The results come back unordered. There are elements in the first page that have dates that should put them in the second page. I think these will skipped over...

Does that make sense? Or am I missing something?