Use sha hexdigest as token

The repository param, ontology-version path and current time will be
hashed via sha2 for the token.
Delete expired access tokens every day.