Change pubtkt to be a warden strategy

This allows us to use the same authentication for the
mounted resque engine routes
Merge branch 'pubtkt-warden'