Several improvements to the python client

- 403 is not a good HTTP response code :)
- Add copyright headers and shebangs
- Use header for token instead of query param
- More CLI options: host, port, api root
- Interactive authentication support