Pass query filter attributes to policy engine

With the v3 api, there will be cases when a cloud provider will want
to be able to protect apis by matching items in the query filter
string.  A classic case would be:

GET /users?domain_id=mydomain

The change augments the v3 controller protection wrapper with one
that will also pass in filter parameters. Since this filter list
also equates to the filter_by_attribute code that the subsequent
api call will make, the filterprotection wrapper passes the filter
list into the api call, allowing the code body to not have to
re-specify the same list.  This also has the consequency of fixing
all the missing filter_by_attribute statements in the current code
base.

Some tests cannot yet be run due to dependency on completion of
v3/auth

Fixes Bug #1126048
Fixes Bug #1101240

Change-Id: Ibd9867f6eed585414671bbab774df95b8acdf6a5
Merge "Pass query filter attributes to policy engine"