Remove kill-AM-over-REST call

Currently we expose a rest servlet to kill an AM:

  get("/am/kill") {
    client.kill(state.appAttemptId.getApplicationId)
  }

This is useful in some cases, but is also potentially dangerous in some environments. This feature should be toggled on or off via a config and probably defaulted to off.