Don't require authentication for hosts API

Also add tests for hosts controller.
Add an aka_hostname method to Host

We don't want or need to store the aka hostnames as separate hosts
for a site, because we don't need to use them within the app. They
are needed for configuring the CDN, but we can generate them for
that purpose from the real hostnames.
Include aka hostnames in the hosts API

We need to configure the CDN to handle these hostnames in the same
way as their real hostnames, so they should be included in the data
we expose for that purpose.