missing code in authentication mechanism and implemented GET marks

Signed-off-by: Alexander Skjolden <alex@plastboks.net>