Switch to pyramid_multiauth

Simplify the interaction between annotaton.auth and horus by using
pyramid_multiauth and creating a separate authentication policy for
the annotator auth token.

This should make it easier to plug in in support for issues like #245, #126 or other authentication providers, such as pyramid_ldap, pyramid_persona, pyramid_oauth2_provider, etc.

cc @mitar @renoirb