Browser view protection, cleanups in results

Made that the browser view requires cmf.ManagePortal permission
to view, Zope can then handle basic auth (and cookie auth, of course),
made that more AT-fields are skipped on serialization.
Added simple schema document for the JSON
Removed dropped features.
Whitespace