Move tests to utilities. Clarify missing functionality

org.hl7.fhir.utilities/src/main/java/org/hl7/fhir/utilities/http/ManagedWebAccess.java

@@ -68,6 +68,7 @@ public class ManagedWebAccess {
   }
 
   private static WebAccessPolicy accessPolicy = WebAccessPolicy.DIRECT; // for legacy reasons
+  //TODO get this from fhir settings
   private static List<String> allowedDomains = new ArrayList<>();
   @Getter
   private static IWebAccessor accessor;

org.hl7.fhir.utilities/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java

@@ -207,4 +207,10 @@ public void testTokenAuthFromSettings() throws IOException, InterruptedException
       null,
      null, DUMMY_API_KEY);
   }
+
+  @Test
+  public void verifyAllowedPaths() {
+    //TODO the allowed paths cannot be set for now, meaning all will be allowed.
+    ManagedWebAccess.inAllowedPaths("http://www.anywhere.com");
+  }
 }