Allow the GET /clusters/ to not need a token

A public cluster can be viewed without needing to be logged in.
Tidy up test config
typoed
Merge pull request #13 from clusterapp/cluster-listing-doesnt-need-token-if-public

Allow GET /clusters to not take a token