Api authorisation

Closes #63 
Thanks for the explanation @BMartinos. @devcritter I agree, I think I need to add the skip and limit filters.