Prevent /auth endpoint from being framed
Implements #76, teams are now a user resource