cleanup of type sigs by using a type alias
more clean up of type sigs. put VThrow alias in package object
plugged AuthUtils into login route
added hmac to auth token