Moved to HTTP Basic auth for the API. Removed open resources.

Open resource removed for the moment, they don't seem to be much
useful. HTTP Basic auth is now used instead of api_key in GET
argument.
Handling request without 'resources' set.

Moved to make_response for authenticate method.
Minor optimizations, updated docstrings.