Superuser access token

If the associated user to the token is set to `*`, authenticated client will have an unlimited access to all resources.

@flexik After reviewing the commit, just :+1: it please don't automerge it. I would like to keep a possibility to edit the commits before merging them into master.