Signed authentication follow

* Created a Token model
* Moved global admin specific REST logic to oae-rest/lib/api.admin

Addresses https://github.com/sakaiproject/Hilary/issues/345