Updated invoice creation handling.

 * Invoice post address is now configurable. default is 'invoices'
 * Invalid access tokens now return a 401 and log the clients ip
 * close #8