Refactor the security worker and API calls and add a bunch of tests

test/testconfig.py

@@ -26,7 +26,7 @@ class TestConfig(DefaultConfig):
   DB_URI = os.environ.get('TEST_DATABASE_URI', 'sqlite:///{0}'.format(TEST_DB_FILE.name))
   DB_CONNECTION_ARGS = {
     'threadlocals': True,
-    'autorollback': True
+    'autorollback': True,
   }
 
   @staticmethod
@@ -59,7 +59,8 @@ class TestConfig(DefaultConfig):
 
   FEATURE_SECURITY_SCANNER = True
   SECURITY_SCANNER = {
-    'ENDPOINT': 'http://localhost/some/invalid/path',
+    'ENDPOINT': 'http://mockclairservice/',
+    'API_VERSION': 'v1',
     'ENGINE_VERSION_TARGET': 1,
     'API_CALL_TIMEOUT': 1
   }