Fix bug where */* Accept value was being used incorrectly. It should
just use the first item listed.

Add beginning API docs for responses and authentication/authorization.