Progress on #82: making the system an OAuth provider with doorkeeper, and exposing API endpoints for interacting with user