Merge pull request #314 from paxtonhare/dev

#308 - fixing auth to use response header to use proper scheme
#311 - adding support for external authentication (Ldap and such)