Add app.isAuthEnabled.

The flag is set by `app.enableAuth` and can be used to detect
whether the access control is enabled.
Merge pull request #170 from strongloop/feature/add-app-isAuthEnabled

Add app.isAuthEnabled.