I'm a newbie to apache configuration, so I just spent hours trying to determine why none of the REST-api-with-authentication web2py examples were working for me. All worked fine without authentication.
It turns out the apache server with mod_wsgi strips the authorization out by default. A one line sentence about this in the web2py manual would have left me with more hair! Thanks for listening.