Switch to JWT for Auth

[sean3z]

As it stands, clients must maintain user credentials for auth required endpoints.
Should instead issue a JWT at auth-time and rely on Authorization: Bearer <jwt> scheme