API Gateway -> trace retrievel for every trace containing ApplicationType information

certificates itself are ignored for safety reasons

- extracted security definition from swagger.yml into security.yml
- added seperate functions to verify tokens for a constant role
- added security definitions to protected endpoints

added generation of JWT tokens

added options to:
- add user
- delete user
- fetch users
- authenticate with username/password