Added header token authentication.
Moved the adding of the header to before filter processing, the response can be closed after so we can't rely on that without a ResponseWrapper.
Successful login now returns the token in a json object.
Merge pull request #2 from jensalm/master_username_password_security

Master username password security