added web_server
CHANGELOG:
* using TokenAuth instead of HMACAuth;
* added tokendate to every user;
* if a token is older than a day then raise a 401 error;