Removed ability to authenticate API requests with the password because it requires hashing it which can make requests up to 100 times slower. Also added new API request for /api/logout/ so that you can invalidate a key - also updated client side JS to reflect this