Gt 20

Auth endpoint has been created. Once page is accessed a new authToken is generated and returned as a header.
I think I had put `Response.ok()` in as a place holder.  `Response.noContent()` would be a better fit since we're not actually returning any response body (no XML, HTML or JSON..)

For reference: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html