Create new endpoint in middle-tier to get app config

[grtjn]

app config consists of things like:

• app-name
• guest-access
• disallow-updates
• appusers-only

[grtjn]

These details are currently sent along with the user profile, but that is both fragile (forgotten in certain cases), and non-intuitive..

[grtjn]

Pushing away..