Move all services to services/ so / doesn't require auth
Merge remote-tracking branch 'origin/99-esgf-session-authentication' into next