make authentication failed status codes explicit
verbose option and better logging & comments for routes
fix verbosity, add more comments