138 health ping endpoints

health ping endpoints.
- No token or projectid checking.
- vault name cannot be health or ping.

I have concerns about using `endswith` for this. If I can craft *any* request that ends with /v1.0/health I can bypass the requirement for an auth token to be passed (a whitelist for the auth middleware should probably catch this but we shouldn't depend on it). Isn't `path` fully qualified? Can't we just use `==` instead of `endswith`? 

If path is not fully-qualified, just use urlparse.