Team server

All endpoints except /auth/login require an Authorization: Bearer header.