Exposing our apiAuthRequired middleware.
Adding in the ability to recognize API credentials and populate user data.
Adding apiAuthRequired middleware.

This will require a user be authenticated via the API auth before allowing the
user to continue.
Renaming apiAuthRequired -> apiAuthenticationRequired.
Adding a getToken controller.

This allows a developer to exchange their API key pair for an OAuth token.
Adding in Oauth config options.

These control the oauth token TTL, as well as the URL at which developers can
exchange their API keys for oauth tokens.
Experimenting with express router.

This is still broken, but making progress.
Removing legacy code.
Adding in protection against duplicate calls to getUser().
Refactoring our middleware to use express routers.

This lets us properly use CSRF.
Adding changelog / upgrading guide.
Moving the bodyparser middleware.
Moving our stormpathMiddleware to our routes.

This fixes issues with this code running twice, and causing odd routing issues.
Adding API auth docs.
Version bump.