Put all controllers behind auth

This PR moves the before_filter that forces authentication up to the application_controller which will affect all actions on this app. This came out of my noticing that a number of views in this app were exposed to the world and there is definitely data here that we don't want to be reachable by any old person, especially the new integration settings credentials. I talked to a few folks in the office about this and I didn't hear any reasons why we shouldn't do this, but I also don't know what automated tasks might be affected by this change so I'm definitely looking for feedback. 

@riverblufftrail @dpetersen @bbauer @perryqh @quady @sleverbor @maeve 
@bbauer I added this so folks wouldn't need to remember to create a .env.development and a .env.test in order to boot up the app. I'm assuming there is a .env.production that has the real value but I didn't go to the point of checking that.