Correct authentication and token generation v3 api

1. Remove a wrong route mapper for '/v3/tokens' path.
2. Correct NOAUTH list to include path of authentication and token
generation v3 api.
3. Correct authentication implementation of the api.
Ah, okay so double nested "password" in the hash chain.