Initial version of authentication.

This lets you fetch a bearer token, but only gives you a reasonable
response if everything works. Doesn't handle bad passwords or other
issues. There is also no test yet for the segment of the code that
actually makes the HTTP request.