Issue 843 hidden apps api

In API listing calls, return only authorized objects.