client side working
add User model class; beginning of server side token verification
dao tests now use real mongo instance; add user related dao calls
functions to get user from access token in api server
api server tests for access token handling
Merge branch 'auth'