Fix authentication from cookied token.
Pass status codes from MC API to browser for #146.
Merge remote-tracking branch 'template/master'