Interaction with api was made completely stateless.
`User.unauthorized_result` was used to respond with HttpUnauthorized.
Login form missed email validation was fixed.
`api` validation method messages ids were named correctly.
"put_detail" -> "patch_detail", "get_list" + auth -> "get_detail" + auth
Web client was updated due to Api methods changes.