patch tokenserver

patch to tokenserver so that syncserver accepts self-signed certificate when
verifying assertions.
instructions for working local development setup

this is what I've ended up with after much trial and error...