Beginnings of API key authentication
Sanitized testing code a bit
Better database setup/teardown in tests
Added API key authentication

Also, basic authorization checks.
Use an independent fixture instead of mucking around with the SQLAlchemy objects
Added authorization checks + modified some routes/schema

This probably breaks the client libraries considerably
Client libraries working (partly) with test code
Merge branch 'token_auth' into dev