Add GET /apps/:id validation
Fix: with_client handles type of authorization
Add GET /apps when unauthorized test
Add explanatory comments to AppsValidation