feat(controller): expose app url

While users should not have access to view a cluster's private
information like the cluster's auth key or the list of machines,
we need the cluster domain in order to expose the app url to the
user.
Merge pull request #1582 from bacongobbler/903-apps-open

fix(controller): expose app URL