Merge pull request #5 from featalion/auth_and_tokens

implements basic auth scheme to API
removes root node from all endpoints, including devise auth