update dependecies

to eve 0.3 and eve-elastic 0.1.4
fix(auth): make api home visible without auth
fix(auth): return CORS headers for abort responses
fix(docs): make use of app factory for docs