have domain-server bail if username/password not provided for auth
force DomainServer to wait for session UUID before setup with auth
use existing constants for HTTP operations