Adds auth package with token auth backend

Adds an interface for AccessController which handles verifying that a request has sufficient access for the current operation.

Implements a "token" AccessController which handles bearer tokens in the form of signed JSON Web Tokens.
Yeah I checked that before. Also, if you use `%+q` it will call `strconv.QuoteToASCII` for what it's worth.