Added an auth token filter to prevent users from accessing annotator Store API without a token.
Added CORS header configuration to allow x-annotator-auth-token to be added to header by REST consumers.
Changed production data source to use create-drop strategy to avoid issues with the data model until we add liquibase migrations.
Removed unnecessary converter (might want to remove the other one as well).
Added three sample applications with API keys.
Changed the app name to be lower case because it's used as the context path for the application