Authentication added (HTTPBasicAuth), Authorization WIP
Refs #27
Allowed roles can be set for an api endpoint using allowed_roles decorator. Authoirzation issue solved!
HttpBasicAuth() object say auth provides auth.username function that can be used to get logged in user.
Refs #27