Use persona for authorization
Add token authorization handlers
Clean up sites model better front end for it
Finish sites UI
Towards working events. Still need to debug CORS