Allow authentication via URI query parameter

[SaberStrat]

Introduce new annotation for resources that makes the authentication filter look at the URI query for a parameter containing the API key instead of a header. This enables clients that cannot supply headers to use authentication- locked resources.

Addressed Issue

#641