Issue #30 Changed three-legged authentication to two legged authentication in the REST server.

Just realized that two-legged authentication is what we need to allow client apps to
access our API safely. More details at
http://cakebaker.42dh.com/2011/01/10/2-legged-vs-3-legged-oauth/