It's possible for the client to assign calculation results to another user

[Lars Butler]

When a calculation is run, the owner username (the platform auth'ed user) is passed to the oq-engine-server, which is then passed back to the platform when the calculation finishes and it's time to import results from oq-engine-server into the `icebox`.

With the current implementation plan, this username will passed through code in the oq-platform client, which means that one registered user could create an annoyance by giving a calculation to another user. This should not be able to happen.

We need to come up with some way to prevent this.

[Lars Butler (lars-butler)]

One possible solution is to simply
1) require authentication in the oq-engine-server, always
2) add middleware and configuration to the oq-engine-server to delegate authentication to the oq-platform (basically, we just need use the sessions and auth tables in the oq-platform)

[Lars Butler (lars-butler)]

Icebox api method `POST /icebox/artifacts/import/` also needs authentication. Then the problem would be solved.