Lots of comments added to cmApi,
Authetication token no longer in query,
Authetication token remains in header.
Tests added for aoi conventions checks
Merged 'dev'.
Finish api-polish