Doc updates, Token auth scheme, Test coverage updates

# What's New?

 * We have CORS support
 * We have a token auth scheme (See `api_docs.md` for usage examples)
 * We have a way of creating tokens (but not for deletion yet)

# What's Next?

 * Token deletion
 * Email consent checkbox

Whoops - forgot to write a test with that var. Looks like hound doesnt retroactively delete comments on lines that have not changed (but are no longer violations)