fix(api): return 404 for /_api/_all_dbs

Hoodie considers database names private and CouchDB doesn’t. Hence
this special handler to avoid leaking unwanted information.

* * *

This commit was sponsored by The Hoodie Firm.
You can hire The Hoodie Firm:
http://go.hood.ie/thehoodiefirm
Merge pull request #316 from hoodiehq/block-all-dbs

fix(api): return 404 for /_api/_all_dbs