Allow Anonymous Status Checks

[nniehoff]

Fixes: 297

This change enables anonymous access of the /api/status view, if the request is authenticated the response will contain version information as it does currently. However, if the request is anonymous an empty json response is returned to avoid exposing potentially security-sensitive version information. Another approach would be to use something like django-health-check.

[glennmatthews]

Just checking, since you also opened #297 - but does this actually meet the requirements you identified in that issue? That wants the API to include information about whether the DB is working properly, for example.

I know there's a need for some sort of unauthenticated health-check API endpoint, and I understand if this is a good starting point for such a thing, but wondering if we should leave #297 open even after this PR is merged, as a feature request for a more comprehensive endpoint such as using django-health-check.

[nniehoff]

Just checking, since you also opened #297 - but does this actually meet the requirements you identified in that issue? That wants the API to include information about whether the DB is working properly, for example.

I was told it did, however after some testing, I can confirm it does not, I'm closing this PR.