Initial cut of API authentication.

- move resteasy app to /rest-api rather /
- no password salting yet
- using http basic authentication for all API calls at this time.
Formatting only, XML formatter set to 4-space indents, 111 line widths. No tabs.