add mustache
createTag functionality to server
Send 401 on unauthorized requests