CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.