Separate API from the rest of the app

Authentication was needed to access all the pages, including the API. API must be public so the applications can directly communicate with the Back Office. I don't know if the idea was to provide the Android application with the same auth so that only that application can take advantage of the API... But, for now, it's public.