Implement basic auth and GCS rendering.

Done. Good find. I updated the code, but haven't tested yet. I'll probably test tmrw or Thurs. on a live server before committing.