Add token-based authentication.

[jbuchbinder]

This patch adds authentication based on a passed token, contained in the X-Token header. It allows a login endpoint to create a token which can be passed as a header to all subsequent API calls.