Integrate ACS and Server API

This changes integrates MSU ACS provisioning/configuration with the existing Server Read/Authoring API. Changes performed:

1) Remove User-Authentication TODOs with actual ACS claims user-id.
2) The Migrator class now creates a sandbox/sandbox supercollection/collection in which anyone can edit.
3) Post forward from cz.htm into cz2.html supercollections/collections parsing.
4) Include missing supercollection parameters across Authoring APIs.
5) Security improvements to API to ensure users can only modify data from their collections.

Code Review (in progress): http://mrccodereview.cloudapp.net/ui#review:id=1071

Test: Basic test scenarios performed agains cz.htm and cz2.html using current code and "ACS Integration" pull request as well.

Deployment: In order to populate the new http://server/sandbox/sandbox/ supercollection/collection, the test.czp.org database needs to be deleted and the website restarted.