Documented allowed values and error responses

Parameters with a fixed set of values, such as date_bucket, sort and source, now list their allowed values. Authenticated endpoints also document the 401 response.