API supports authenticated calls

Acceptance:

• Calling the API requires providing credentials that match a username/password couple in the DB
• Users can have read only or read/write privileges
• Read calls can be performed by any user
• Update/Create/Delete calls can only be performed by read/write users