API: security update

REST requests now include a request signature that is signed using a developer's private key.  The signature is verified by the API server before the request is processed.