Added tests to ensure access decorators do what they should and that the default is the same as admin.  Added a warning if an endpoint does not have an access decorator.  Move an internal function in the Resource.route method to reduce the function complexity (as per the limitation in the python core analysis).