Move the security stuff to the management app
Move utils to management app
Update main()
Remove security include and session factory

We have no need for the authentication policy or session factory in the
main application.
Add main() application entry point for apps

This makes sure that we can individually start the two apps
(management/api).
Add the entrypoints for api/management

This adds the entrypoints for the api app and the management app, this
way they can be started individually.
Update development.ini with new app sections