Allow user access by token (needed so the Hubot script can work)

This is a horrible hack
Add API endpoints