Added tingodb middleware and api tokens

See util/secure.js for auth design
Todo:
1. user (+role) router (data schemes, session)
2. cordova-watch bot