Token::AuthorizationPolicy

# What's New?

 * Cleaned up the API token authentication logic

# What's Next?

 * Comply with JSONapi.org
 * Cleaning up the various `TODO` items I can find.
 * Wait for hound to bark at me.