added client authentication model
added handleXHR method in datasource
added maxPasswordLength
began with PATCH support in ResourceHandler