Changed the default api endpoint security to require admin access.  Each handler should be decorated with @admin, @user, or @anonymous to override the default (the default is the same as specifying @admin).

I have attempted to pick the right value for all of the endpoints, but it would be handy to have someone else review my choices.  I have removed some of the admin and user checks that would now be duplications of what the decorators do.  Some of the tests have changed, since the error messages are not necessarily the same.

I modified the existing loadmodel plugin to better presrve the function name using the functools.wraps function.  If we wanted to ensure that decorated functions and methods looked even more like their original functions, I'd recommend pulling in the decorator module with pip; this isn't required, but it makes some debugging of decorated functions and methods easier.
Changed @anonymous to @public.
Fix docstring typo from long ago.
Place access decorators into girder.api.access
Fixes #363. Delete token from db on logout
Fix cyclomatic complexity in test base class
Added tests to ensure access decorators do what they should and that the default is the same as admin.  Added a warning if an endpoint does not have an access decorator.  Move an internal function in the Resource.route method to reduce the function complexity (as per the limitation in the python core analysis).
Updated the documentation to include api access decorators.
Merge pull request #364 from girder/delete-token-on-logout

Fixes #363. Delete token from db on logout
Merge pull request #362 from girder/api-access-decorators

Api access decorators.  Closes issue #340.