generate auth param in plugin/js-rco and check it in /rco endpoint

[cvillecsteele]

Today bogus polls to /rco generate events, etc... Need to create and check request signature.