Enable access control.

Add "Customer hasMany AccessToken" relations and other models
required by ACLs.

Add unit-tests for /api/customers.
Add the utility to recreate tables
fixup!  Add ACL test

 it should not allow GET /api/customers/{another-id}
Allow tests to run against demo oracle/mongodb

Modify config.js to use "demo" when NODE_ENV is "test" and custom
config is not provided.

Increase the timeout for data import.