Bugfix for Issue https://github.com/mytardis/mytardis/issues/262
Merge branch 'master' into mytardis-api
wrote custom authentication manager that allows anonymous and authenticated access

also added some more authorisation rules