Implement basic auth with an api key; #1085

Both Balanced and Stripe use this method, so you can do `curl -u
api-key:`. It's nice.
Turn off CSRF for requests w/ a good API key

Definitely gonna want a review on this one. #1085
Bump version to 9.2.0
Bump version to 9.2.0-dev