Add interceptor to set token header on auth
Add dummy route to test injector
Add dummy routes to test interceptor
Change user lookup to migitate timing attaks
Update helpers for token auth