Make DATABASE filepath a config variable.
Move load_data into app so that we can load test data for unit testing.
Return Unauthorized on incoming PATCH if no credentials are provided.
Implemented bearer token authentication.
Allow extra permissions to be specified when adding users.
Check authorization before patch submission and merging.
Ensure that only patch creators can update their patches.
Add test verifying that merged patches cannot be updated.
Implemented "OAuth dance" to enable registering ORCID credentials for authentication.
Do not overwrite credentials with timestamp immediately upon updating them.
Merge pull request #8 from periodo/auth

Authentication and authorization