test that unauthorized requests don't return body
test that stashes can't be created without auth
ensure unauthorized requests halt properly
Merge pull request #789 from amdprophet/fix_cors

Ensure unauthorized requests are halted appropriately