User calendar iCal and RSS serialisation

This builds on a couple of other PRs, so don't review this just yet. Although feel free to have a high-level look if you wish to
I would think that an administrator wouldn't need to provide the token. They would just be able to get all calendars. That points towards using the token as a query parameter instead of a path parameter