Token authentication for Chef Server

Ping @smith @seth @mmzyk @danielsdeleo @lamont-granquist.

Hot off the presses, have at it!
What's the purpose of the `created_at` timestamp? Would it be worth removing this from the response for a first version?