added some initial user/code/token interaction method
added toJSON instance for TokenRecord
added /codes and /tokens routes
added info about authentication to the README