token-related backwards compatibility

* BaseClient#token= implicitly creates an AuthToken if
  given a String
* make AuthToken#token_data lazy, so you can just do
  AuthToken.new(auth_header) instead of #from_hash