CON-36: Allow multiple access tokens associated with single user

Added an AccessTokenManager to handle complex logic for associating
users with one or more access tokens. Also added some additional unit
tests to verify correct functionality
added more acceptane tests for CON-36