Kazoo 2563

Uses current timestamp for comparison.

Also exposes /token_auth for programmatically deleting an auth_token
This shouldn't be necessary, why not just use the token doc in the context?