add support for KEYCLOAK_TOKEN to fix loading in js clients.
fix issue where unauthenticated users got a 500 return instead of an auth error (this should probably be refactored a bit more. the auth portion of this code base has seen some better years!)
KEYCLOAK_TOKENto fix500return instead of an auth error (this should probably be refactored a bit more. the auth portion of this code base has seen some better years!)