Update visibility of Decide Controller

[TruffleMuffin]

Much of the intended usage of Decisions was for a 'private' web server to host the calls, however there is another usage which is built into a microservice directly, then have those services issue calls between themselves. This provides performance improvements and seems a better approach in this type of architecture.

Update the public api to support this kind of model, including the ability to secure the decision controller