Add a token field for users.

Users can authenticate via their username and token.
Add API endpoints for viewing challenges.
Can authenticate via AUTH headers.