Setup token based authentication

- New users will automatically get a token
- There is now an endpoint to make AJAX requests to login

JIRA: SPB-48
Yes, if that get fails, it should throw an exception (like Django throws it).