handle auth

-- .access --
{
	"Username": "aladdin",
	"Password": "opensesame",
	"StatusCode": 401,
	"Message": "ACCESS DENIED, buddy"
}
-- info/refs --