Security

@skynetim @chrismatthieu 

This follows the whitelist/blacklist idea on sends and queries.

Anonymous queries on http or coap are no longer supported since we need to authorize uuid/token to have the ability to check if results are viewable by a client.