Optional Auth + Multi-provider for /application

/api/v1/application is accessible with or without an API token
* if authenticated, the endpoint will include all private images
  that are visible for that user.
* Does not hit OpenStack, relies only on membership information
Forgot to add /api/applciation file
Completed feature ATMO-356. OAuth working, included test case to generate and use token
Merge branch 'ATMO-356' into herja