Feature/717 read api

It seems to me that there should be a way of getting rid of the `ApiAuthenticationEntryPoint` since an HTTP api doesn't really have an entry point (like a login page). Initial attempts to remove it didn't seem to work. I'll have to investigate further.