resources concat and minify in production
document api auth mechanism (fix #65)