ASGARD-1311 require auth for most browser requests

OneLogin auth should be required for all non-flag browser requests, but not for scripting requests

Asgard constantly logs people out for no good reason. To avoid this source of user irritation, and to let us work faster with Asgard, make it so every request sent by a web browser requires OneLogin authentication. This will make Asgard redirect the browser instantly whenever needed so the user won't need to keep logging in all the time in Asgard.

Scripts don't yet have a good way to authenticate, so make sure scripts can still make GET and POST requests to Asgard without authenticating.

OneLogin is sometimes broken, and we need to be able to set Asgard's internal flag to SUSPEND_AUTHENTICATION_REQUIREMENT without being authenticated. Make sure the flag controller is not blocked for a logged out user.