Token Auth

I have the token auth in place right now. When the page loads the following should be checked:

1. Check for a token 
2. If no token, ask to auth with github
3. if a token, try to grab /settings
4. If no settings, setup the repo (clone and brand)

You will see that right now, visiting /token in another browser or incognito mode will still deliver a token. This should only happen if we have a session cookie or are doing it over basic auth.