Allow the GET /clusters/ to not need a token

A public cluster can be viewed without needing to be logged in.
Tidy up test config