fix to Garbage Collection

* go's prepare doesn't like ' in statements. Joy.
force "h" into accepts

* Add devices return a "has_passcode".
Replace "Unauthorized" with redirect to /
Merge pull request #136 from jrconlin/master

fix gc; commands; unauth