Implements Client Management Endpoints

We already had the R of CRUD, this adds the other 3. The 3 new endpoints require an oauth token with the scope `oauth`. Yo dawg, I heard you like oauth?

@rfk r?
@vladikoff you should take a look and see if there's something I've forgotten that the console will need.

fixes #60 
Hapi's authentication conventions have me thoroughly irritated.

For example, in http://hapijs.com/tutorials/auth

"Think of a scheme as a general type of auth, like "basic" or "digest"."

Ok, that means our scheme should be `bearer` or `bearer-token` or something.

But then what goes in strategy? [The Hapi basic auth plugin](https://github.com/hapijs/hapi-auth-basic) uses `simple` as it's strategy name. WTF? "simple" what? Then in your routes, your supposed to put the strategy name for each route, so in the Basic auth case, you end up doing something like `config: { strategy: 'simple' }`, which is super-uninformative when looking at it out of context. 

In conclusion, I think it's fine. I don't really like 'dogfood' as a "strategy", but I get what you're trying to signal there.