Switch to pyramid_multiauth

Simplify the interaction between annotaton.auth and horus by using
pyramid_multiauth and creating a separate authentication policy for
the annotator auth token.