Abstracting away repeated logic
Token-based authentication
User metadata
Users doc
Introduced HTTPBasicAuth
Dropped request.values usage

The dictionary `request.values` contains both querystring arguments and
POST/PUT body arguments. It's better to be explicit about where those values
should be coming from.
Added shiva-admin utility

This utility script will be used for some administration tasks like user
creation.
Added PUT
Users are created active