Renaming apiAuthRequired -> apiAuthenticationRequired.
Adding a getToken controller.

This allows a developer to exchange their API key pair for an OAuth token.
Adding in Oauth config options.

These control the oauth token TTL, as well as the URL at which developers can
exchange their API keys for oauth tokens.
Experimenting with express router.

This is still broken, but making progress.