Introduces token auth in a before action hook.

`before_action :authenticate` expected to be overridden for controllers needing finer-grained control over authentication.
Excludes certain pages from authentication.

Specifically the error, contact, pre-qualification and identification pages.
Adds page objects for home and error pages.
Adds a bare-bones factory for the "Principal" model.
Simple feature spec for token authentication.