first part of transition to oauth2
Merge pull request #7 from cni/kevin-auth

first part of transition to oauth2