Restructure api authentication routes

Based off of https://github.com/bocoup/rave/pull/19.