Metacat

remove portal servlet and configuration - no need for this if we are supporting auth tokens from authentication service.

defer to D1 PortalCertificateManager to pull authentication credentials from the request before defering to old Metacat cookie session

Add the code to check the authorization of the client which is reindexing a pid.

Created the updateSystemMetadata method.

Add the code to check if the current node is the authoritative node for the the given pid.

Add the check of permission to update the system metadata.

add whoami endpoint to make debugging authn/authz easier as we use additional mechanisms for proving identity.

Remove the code to check sid on create and registerSystemMetadata.

Fixed a bug that put the detail code in a wrong position.

Add the code to check if a user tries to modify an immutable field on system metadata.