customizable friend workflows
support access via api token
implement redis-backed user authentication
remove _ping API
implement access token management