QA tools onboarding: All APIs should be validated with username,password in headers

All the `/qtcloud/users/*` apis that are used post login, should check `username` and `token` from headers before allowing access to the API itself.