authentication / authorization

[rbuckheit]

We should add authentication to the server. Could use to investigate what existing auth services might work well here (maybe NPM or github) so that npmserve can continue to be a natural extension of npm and wouldn't require new credentials (assuming that provides us with the right security guarantees)