WIP: API Doc

The API uses [token authentication](http://www.django-rest-framework.org/api-guide/authentication/#tokenauthentication).