Move authorization for /varz into ApiController

This will allow us to add separate routes that do not require authorization.

Signed-off-by: Tom Xing <xingzhou@cn.ibm.com>
Add /healthz endpoint to Bhm::ApiController

Signed-off-by: Tom Xing <xingzhou@cn.ibm.com>