APIM Authentication and authorisation

Overview:  APIM provides two methods for secure access to an API operations:

1. Subscription: passed in the header or the query string (generated primary and secondary subscription key for each subscription), and 
2. Client Certificates.

WIP