Auth Token Middleware

Security decorators introduced for guests(unauthorized) and authorized
users.

/openid urls are allowed without any authentication

Users endpoint is updated to use db_api

Change-Id: If2cdabd2df939909b0afb008f2ec360f1975c0a9
Merge "Auth Token Middleware"