changes token usages to pubkeys

using gryphon request signing instead of bearer tokens

fixes #28 

I'll be working on profile-server and 123done patches that use this endpoint, so that everything can continue to work together.