Moved endpoints. CreateApplication requires a token.

getrole, getroles, getallwaiting from user to admin.
creationToken in secrets.config is used to create applications.
fixes #19. Touches on #21.
Added token security to accept and reject.

fixes #21
Merge pull request #23 from agrc/create-application-security

API Security Improvements