* first cut at requiring login for most API functions
* fix checkstyle warnings
* move BMInterface functions which are available to unauthenticated users into a new class, BMInterfaceNewuser, and only include BMInterface from responder after verifying that the user is logged in
* bah, accidentally committed a test flag
* checkstyle
Merge pull request #641 from cgolubi1/625_api_auth_check

verify user authentication before allowing access to most API functions