Schema for API consumers table.
Consumer model.
Start implementing request verification.
Implement POST/PUT verification.
Better error messaging when given an unsupported algorithm
Make sure tokens are tied to systems properly.
Remove repetitive redundancy.
Anchor auth header regexp.
Make method regex case-insensitive.
NO `HEADLESS HORSEMEN` ALLOWED (enforce verb boundaries)
Ensure existence of JWT claim `key`
Merge pull request #33 from mozilla/28-access-control

Implement access control [closes #28]
WIP full publish
Small tweaks to support new badgekit-issue-client
Changes based on review
Fix badge test data.