Store tokens so that they can be used to lookup the current user

We will also expire tokens after a period of inactivity