Proper resource authentication

Changed application to put a router in front of the authenticator so
that trace and static resources do not need authentication. This was
based on an answer by the Restlet creator here:
http://stackoverflow.com/q/19213209/
Also moved the directory resource creation to its own method.