complete Server.authenticate
Server.authenticate_payload implemented
documenting everything, closing down APIs
scaffolding rake