* fixed a bug in authenticate decorator which gave the authenticated results for non-authenticated users
* added documentation for decorators module
* added authenticate decorator to the methods in taggable and sharable mixin modules
* added set_secret and set_session_key methods in Api class
