updating to reverse url resolvers, extending access_token db field
adding support for api access via passwords being given out