Since the web view makes a few API requests to load log messages and
other content, we have to allow more requests. Also, it sounds like
users at a university might all appear to be on the same IP address,
so we want to try to account for that.

Add a logging handler for printing to stdout. For container
deployments, we remove all other logging handlers and use this
new 'console' handler only. The incantation for starting
gunicorn with supervisord now sends the access and error logs
to stdout.

Traefik can pass the subject and issuer in a 'cert-infos'
header, so I am adding an authentication backend to use that.

All throttles now use a database-backed cache since that is the
only way to do centralized throttling (important for production
deployment with multiple workers). We also add default throttles
for anonymous users for the entire API.

VOEvent IVORNs now use ivo://gwnet/LVC instead of
ivo://gwnet/gcn_sender. Also use the default superevent ID everywhere
in a VOEvent, including filename, even if it has a GW ID.

Containerized versions of the service will now get their LVAlert
credentials from the environment.  Also add a script for
processing environment variables and starting LVAlert overseer.

New API backend which gets a full X509 certificate, verifies it,
and extracts the subject.  To be used in the cloud deployment
with Traefik.

We had removed the ability for GraceDbModelBackend to do
authentication, but it is relied on for basic auth by the
BasicAuthentication class in django-rest-framework.  So we undo
that change and remove the GraceDbModelBackend class altogether
in favor of its parent, ModelPermissionsForObjectBackend.

Add django-user-sessions package for more easily managing sessions
and correlating them with user accounts.

Complete rework of authentication middleware and backends for
both the web view and the API. There is now a single URL (after
the login page) where the shibboleth attributes are put into
the session and the user is authenticated and a persistent
Django session is created.

Add access_managers and superevent_managers to ADMIN_MANAGED_GROUPS.
They will be removed in the near future, but for now, they should
be included here so that group memberships are not removed by the
ligoauth middleware.

Now require version 2.0.0 of the client and won't allow old
versions without the client header.

Instantiating a second version for the API.  For now, it's identical
to v1, but can be customized as needed in the future.

Moving a few base class throttles and fields from the events app up
one level so that they can be used elsewhere.

Moved events.api and superevents.api into the new api app.
We want to have a versioned API, so these are now in
api.v1.events and api.v1.superevents, respectively. Part of this
change is that we require a custom reverse function (api_reverse)
for handling versioning. Much of the required code changes for this
migration include converting reverses to use this function and
changing relative imports appropriately.