Adding the new API: application entity, permissions, basic routes, ...

* adding new entity API::Application
* permissions thereof
* creating api in the admin interface
* new API Controller
* API Authentication
* API Authorization
* initial resources for media_resources; perviews and media_files
Removing comments for the 'old api'
Use https: instead of git: for submodule url
ui: metadata/copyright/edit: currently selected value is be pre-filled in form

delivers [#66856246]

Squashed commit of the following:

commit 0589e9ca8109ec1b22359ba041652a489415cbfe
Author: Max F. Albrecht <1@178.is>
Date:   Mon Mar 24 17:32:50 2014 +0100

    ui: metadata/copyright/edit: currently selected value is be pre-filled in form

commit 80521335e419a0b89cc91970f2a2bae753866abf
Author: Max F. Albrecht <1@178.is>
Date:   Mon Mar 24 17:32:35 2014 +0100

    test: metadata/copyright/edit: currently selected value should be pre-filled in form
ui: search: remove hint (previously added by accident)

delivers [#67658752]
Sending api::application data too for permissions#index

Squashed commit of the following:

commit 4d17e608c9ff7f5d5d20f212ca3bbeb989df31d2
Author: Thomas Schank <DrTom@schank.ch>
Date:   Mon Mar 24 20:07:52 2014 +0100

    ...

commit ddc793984c1081d3c6eb6347490cb1857ace5604
Author: Thomas Schank <DrTom@schank.ch>
Date:   Mon Mar 24 19:22:07 2014 +0100

    Sending permissions for api_application in permissions controller
Handling api::applications in permissions#put, refactor permissions#put

Squashed commit of the following:

commit efb7a630dd5d3957987be29fafd4da82c05b78b6
Author: Thomas Schank <DrTom@schank.ch>
Date:   Mon Mar 24 22:10:13 2014 +0100

    ...

commit 37b62e6b20ebca9e176f3781c1369183d488ebe3
Author: Thomas Schank <DrTom@schank.ch>
Date:   Mon Mar 24 21:57:12 2014 +0100

    ...

commit e96f3cb85c4c9fc408f9589ea13b9247751a95d9
Author: Thomas Schank <DrTom@schank.ch>
Date:   Mon Mar 24 21:55:50 2014 +0100

    Handling api::applications in permissions#put, some refactorings
Refactoring authentication in the api

* drop custom headers
* send proper header so browsers can respond to it
* extend documentation
* extend spec

Squashed commit of the following:

commit d3e048971c9b4b5a9250f4aa1308e280096f03d2
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 11:25:46 2014 +0100

    Added ref to test

commit 8349a95f29555bf3f6c9e0f897e230105709c1eb
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 10:56:30 2014 +0100

    Extending spec

commit 8e7ef002f4f67b14a1ddabe8f1d10dd45bf97295
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 10:40:55 2014 +0100

    Refactoring authorization
API: impl. and tests custom urls and redirection wrt media_resources

Squashed commit of the following:

commit 6a63242d113da74c91c25d15793539cc2c757caa
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 17:14:56 2014 +0100

    Test and minor fix

commit e346ce1a35c604638ece0f6b2e3da006bed3ca47
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 16:24:37 2014 +0100

    tests ...

commit 400ee5dc0cb1a4a8fb364030461d657fe31430f2
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 15:20:19 2014 +0100

    ...

commit 6b54f0f9194e6d62f91c8019bc48ae0cf12518fa
Author: Thomas Schank <DrTom@schank.ch>
Date:   Tue Mar 25 14:49:39 2014 +0100

    API: Hanling custom urls and general redirect issues
Unobtrusive inclusion of authorization_header for app_admin::applications#show
Filter allowed permissions in various places consistently