WIP ext: CrossRef Flask extension

* Queries DOI record data from the database or CrossRef as JSON.

* Closes #1906.
How does `login_required` behaves with JSON?