API removed login/logout from authenticator interface
API created DataExtension for token authenticator

Add to the DataObject that stores the token
API TokenAuthenticator options editable via config
FIX auth response is now serialized
API tokenAuth login/logout check if owner is a Member

If the token owner class isn't Member, login will be skipped and logout
will not update token
FIX lostPassword() now return array to API
readme update
Create CONFIG.md
Use the same Config/Injector instance
More secure tokens + login/logout use config
API getToken/resetToken functions
FIX semicolon
Remove algorithm + salt keys from hash
FIX validateAPIToken() actually works
API token is stored with Varchar(160)
API Authenticator must implement $allowed_actions

the API now checks if an /auth/ action is permitted through an
$allowed_actions config
Readme + Config update
Update API doc
Added TokenAuthExtension to config