API endpoint for getting claim codes.

* Add an API endpoint for getting all of the claimcodes for a badge
* Add a debugging route for generating JWTs
* Modify `api.auth` to take options
* Allow authorization without a `prn` for protected routes that don't involve users
* Respect token `exp` if there is one.