allow user authentication AND the use of API keys for the same resource
add php session support
update readme
Merge pull request #303 from davidnewhall/master

Refine authentication mechanism.