Build user authorization and authentication.

[kochie]

Currently endpoints are not secure. Before this can be used in production the app needs some method to authenticate API calls and only fulfill them if the user has the correct authorization.