Switch to Flask-Restful and use decorator for the pagination

The pagination decorator works for the first level pagination for now
Refactor the limited view access to user/id

Refactored the get_user method in users.py, moved the access checking
into authorization.py and use marshal to filter the attributes returned.