Add a simple user token authentication.
Start implementing user and company api tokens.
Get initial webhook for triggering reports working.