Add v1 API x-image-meta- header whitelist

Add a whitelist of allowed 'x-image-meta-xxx' style
headers. Attempts to supply other, unexpected headers
will return 400.

This prevents cases such as 'x-image-meta-locations'
being processed, which were not being handled correctly.

Addresses bug 1205018.

Change-Id: I771bb6ae2a4f9cbd7726f952c7a71da99162b490
remove flake8 option in run_tests.sh

flake8 read [flake8] section of tox.ini as options.

function run_flake8 in run_tests.sh should be kept simple,
and tox.ini controls the behavior of flake8.

Fixes Bug #1212988

Change-Id: I35d434ccea1ca2f3ff93657e4ca6dde93bbbf29e
Merge "remove flake8 option in run_tests.sh"
Merge "Add v1 API x-image-meta- header whitelist"