made json default format for api/v1 routes
changed error code messages
added bycrypt handlings
changed order of authentication to make sure access_token was associated with user
added API documentation