Payload deployment smoke

Payload REST authentication, Postgres migrations, and private S3 media.