Manage Access Tokens

[pbrudnick]

The access tokens (aka AT) belongs to a group and we should be able to set different groups (or directly an access token) to a Lambda. The AT has to be hashed and displayed only one time (after creation). The group/AT can be revoked (deleted) The AT should be passed in the different executions. (i.e: header or query params)