Add beginnings of authorization/api token system, based around facebook connect login
Forgot some spec changes with last commit