Lot's more additions, users are now properly authenticated with valid tokens. Time to make the real, RESTful token section.