auth_token _cache_get checks token expired

When auth_token stores the token in the cache, it's stored with
the expiration time; but when the token is retrieved from the
cache, if the expiration time has passed the token is treated as if
it wasn't cached. This creates extra work because now auth_token
has to check the token expiration (either by decrypting the PKI
token or online validation for UUID tokens).

With this change, getting the token from the cache will fail if the
expiration is past.

Change-Id: Id0ec6b3c2e5af4a2d910f16da4e0312733fc2198
Merge "auth_token _cache_get checks token expired"
Updated from global requirements

Change-Id: I0804468699cd7af0b3b520c07fd0aeff809bd2b1
Add role ids to the AccessInfo

Role Names are already there, add ids as well.

Change-Id: Ie6f14a60b182ec2f4ab97c6ced564e63a2f5169a
Rename v3._AuthConstructor to v3.AuthConstructor

Since more auth plugins depending on v3._AuthConstructor are created
in separated modules, this class should no longer be named as it was
private.

Auth plugins using v3._AuthConstructor currently are:

- SAML2 auth plugin (under review)
- oAuth auth plugin (merged with basecode)

Change-Id: Ia097941a465a972dc7ca177a74c8fb8d21d219e6
Merge "Add role ids to the AccessInfo"