Auth and API changes

API version and authentication are now sent via custom headers
WIP: Moving to pure JSON responses by default