User session integration with auth and the API Gateway

[nicolehaugen]

The current user session microservice uses the existing fake auth implementation where a fake token is used; need to change this so that it works with the real AAD auth and also the API Gateway which delegates calls to the microservice if the user is authenticated.