turn DISABLE_AUTHENTICATION into a server property

[kiniry]

See AbstractEndpoint.

[dmzimmerman]

You can’t disable authentication without breaking lots of things. County numbers for pretty much all operations are implicit in the authenticated admin doing the operation.

[dmzimmerman]

I have given some more thought to this and I think it can probably be done, but we'd still need to use sessions to keep track of the county number that is to be used. Given that we'd need to use sessions anyway, I suspect keeping some sort of basic authentication capability using prepopulated database records would make more sense than having a no-auth option.