[IMP] Remove benchmarks endpoint. Secure mobile tests endpoint.

[amh-mw]

Description of the issue/feature this PR addresses:

Various testing endpoints are functional in production.

1. /web/tests
2. /web/tests/mobile
3. /web/benchmarks

Current behavior before PR:

Authenticated and unauthenticated users can run test suites for no good reason in production.

Desired behavior after PR is merged:

New web.enable_tests configuration parameter is only enabled when demo data is installed.

---

I confirm I have signed the CLA and read the PR guidelines at www.odoo.com/submit-pr

[robodoo]

Pull request status dashboard.

[ged-odoo]

Hello @amh-mw
I don't think this is the way we should go, adding a config parameter for this seems really overkill. Here is what we should do in my opinion:

• remove the web/benchmark route, we don't use it anyway
• change the auth method for the web/mobile suite to "user", I don't see why it is not exactly like the normal test suite

and that's it. now only logged users can execute the tests, but I dont see the issue with this. even more, it may be (slightly) useful in some cases. for example, after deploying a fix, or upgrading a db, running some tests manually to make sure that something is still working.