Handle auth-as-tuple in throttle methods also.
add browserid API endpoint (bug 834398)
allow session-based access to all API resources from hosted fireplace
delete method for ratings (bug 848501)
Ratings API docs (bug 848428)