Use sha hexdigest as token

The repository param, ontology-version path and current time will be
hashed via sha2 for the token.
Delete expired access tokens every day.
Merge branch '558-access_token_for_private_repositories' into develop