Generate user tokens by api key.
Add token checking in controller

Create an example page that hits the api to login, then uses the
authorization token to request a protected route.