Private layers

This PR only affects non-standalone behavior.

* For each layer, the registry checks with the index that the pushing user has access to its declared parent. If not, the push fails.
* Session cookie is no longer a valid authentication method (token must always be passed)