Added document string id support and development mode not using db.authenticate

- if db requires no authentication "config.db.authenticationenabled" : false can be used (not recommended for production environments, at least allowed HTTP methods should be limited to GET)
- Added document string id support
- Added config.db.authenticationenabled flag which ignores db.authenticate
- Added checkIfRouteIsAllowed which reads config.routes.allowedmethods
- added routes.allowMethods