User authentication is a nice feature to have. It should do the following * only allow authenticated clients to create, modify, or delete tile pools * associate a tile pool with it's creator