Add authenticate in Operator.
Used in /api/login.
Update Security.
change some protected and unprotected URI.
Add createGuest.
Create default operator when not authenticate or when logout.
Create /api/login and /api/logout.
Used by Rest client to authenticate.