Use restlib2 codes and add bad credentials POST test for root resource
Merge branch '2.1' of https://github.com/cbmi/serrano into 2.1