Feature: Add Auth API and playlist retrieval.

This MR adds a simple authentication API based on bearer tokens.

It also allows access to playlists (which requires authentication, because it requires a music collection).