add app.enableAuth() to enable auth / access control

/to @raymondfeng 

This is required for the worksapce (and other use cases). Specifically see this PR:

https://github.com/strongloop/loopback/pull/86