JSONServiceManage can match on wildcard domain components; server.py is more strict in arg processing.

`server.py` will make sure there is only one `service` parameter or respond with a
400 (BAD REQUEST).
Added `BasicRealm`, a simple user realm with no attributes.
BUGFIX: Handle avatars without attributes.
Updated the README.rst file