Support non-administrator clients in altai_api.auth

- separate administrative, API and current client sets;
- functions to obtain client set with administrative permissions
  (when current user is not administrator, API credentials are used);
- decorators to mark endpoints as available for non-administrators;
- code cleanup.

Change-Id: I988b7b4d8ece53ca5fa3360dc54ec015ae05cc4b