* removed Content.blob
* added SecurityContext with some really rough implementations
* added authentication
  * /api/channel/create authenticates with an agent id
  * all the other relevant services require a channel id to authenticate, the services actually require a SecurityContext, the only real SecurityContext we currently use is an AgentSecurityContext