enabled attribute emulation support

Fixes bug 1063858
Implementation works as described in the second comment.

Change-Id: Ib0aa85f05244044c9f40fa9634b5ed3e8afa1f37
Update oslo-config version.

Update the version of oslo-config in pip-requires.  This update includes
a fix for a bug that breaks oslo.config imports.

Change-Id: I2e31d3980c495b1fd16db5488c7d3c982ce069ac
v3 token API

Also implemented the following:

blueprint pluggable-identity-authentication-handlers
blueprint stop-ids-in-uris
blueprint multi-factor-authn (just the plumbing)

What's missing?

* domain scoping (will be implemented by Henry?)

Change-Id: I191c0b2cb3367b2a5f8a2dc674c284bb13ea97e3
Removed redundant assertion

Change-Id: Iba9f0a5bd713b21487471eb64ce931910b1ca912
Pass query filter attributes to policy engine

With the v3 api, there will be cases when a cloud provider will want
to be able to protect apis by matching items in the query filter
string.  A classic case would be:

GET /users?domain_id=mydomain

The change augments the v3 controller protection wrapper with one
that will also pass in filter parameters. Since this filter list
also equates to the filter_by_attribute code that the subsequent
api call will make, the filterprotection wrapper passes the filter
list into the api call, allowing the code body to not have to
re-specify the same list.  This also has the consequency of fixing
all the missing filter_by_attribute statements in the current code
base.

Some tests cannot yet be run due to dependency on completion of
v3/auth

Fixes Bug #1126048
Fixes Bug #1101240

Change-Id: Ibd9867f6eed585414671bbab774df95b8acdf6a5
Merge "enabled attribute emulation support"
Merge "v3 token API"
domain-scoping

Implement domain-scoping functionality for v3 auth API

Change-Id: Id5e935735a43fefee10a36d9d691578871ba7fcb
Merge "Pass query filter attributes to policy engine"
Merge "Removed redundant assertion"
Merge "Update oslo-config version."
Merge "domain-scoping"