Token based authentication for endpoint

Specify `WATCHMAN_TOKEN` in `settings.py`, and require it to be passed in a query param to the endpoint.