Authentication section revised and repositioned
Revised the authentiction section to prohibit a request when cookie and header token are present.
Fixes #1
Revised Auth to favor API Keys for now and outline moving toward JWT in
Q22014.
Merge branch 'auth' into proposed

Conflicts:
	specification.md