stuff
Merge pull request #399 from patriot1burke/master

don't allow bearer-only to login