a lil more SWAG for the swagger

This enables the generated api docs to also send HEADER and POST vars instead of just query parameters.

It is fully backwards compatible, sets useful defaults for the docs and escapes the docstrings to also be able to write some thing like this:

HEADER: Authorization -- "Token <auth_token>"