Add a token field for users.

Users can authenticate via their username and token.
Add API endpoints for viewing challenges.
Can authenticate via AUTH headers.
Merge pull request #18 from atsheehan/api

Api