Add toolbox option to app.py. Add intial outline of authorization framework with tests. If toolbox is set, tool_id must be sent along with request and this tool_id will be checked to verify it is in the toolbox. Add new manager test to verify this behavior. Reworked base manager to rely on a more hefty JobDirectory class and named constants instead of strings more places.