User token API

Users, and superusers, may now issue arbitrarily-timed access
tokens. This is intented to allow an administrator to issue a token
for an automation system, or for a user to issue a token for their
own CLI client.

Change-Id: I539065ef1df3bb8e97cf6db1f6dba8f1fad9cf43
Merge "User token API"