add "sdk install", lots of refactoring to DRY authentication
linting
only overwrite existing updates on --force
use environment variables for auth
add fixtures for testing updates
fix broken tests
fix stupid callback bug

This is what happens when I take a vacation
use constant for url path
add test for sdk update and install