Arvados

This should be a simple boolean knob in application.yml. If it is false, /projects/public should return 404, just as if there were no anonymous user token configured.

I think the setting should be true in application.defualt.yml, but I'm open to discussion on that point.