Merge pull request #1 from youknowriad/master

secure user api for admin only
Merge pull request #2 from youknowriad/master

fix small bug on /me (add roles to the user object)
Fix user check in fixture
Change header name
handling users by account, losing bedoon dependancy + refacto server