Token authentication for Chef Server

Ping @smith @seth @mmzyk @danielsdeleo @lamont-granquist.

Hot off the presses, have at it!
I don't see much value in a global max/min given the use cases are generally going to be tool-driven anyway (eg. knife token create).