Allow anonymous users to validate hosted apps (bug 1090341)

https://bugzilla.mozilla.org/show_bug.cgi?id=1090341

This already worked for packaged apps, now it works for hosted apps too.
`self.login(user)` also exists in `apps/amo/tests/__init__.py` btw