Implement issuer tokens [closes #9]

Issuer tokens allow third parties to issue badges directly to a backpack, but do nothing else – they only get access to the `POST /user/:id/badges` route.

This implements a new model, `IssuerTokens` to hold those tokens, as well as a new binary `bin/generate-tokens`, so key/token sets can be generated via the command line:

![generate-tokens](https://i.cloudup.com/Mvw3ZeuaUS.png)

This key/token pair can be given to an issuer who would use it to generate their `Authorization` header when sending in a request.

That's determined by the logger that's attached to the app. In this case, that logger is `bunyan`, so it will end up on `stdout`. A utility (like `messina`) can be used to shuttle that stream off to a log aggregator.