Token authentication for Chef Server

Ping @smith @seth @mmzyk @danielsdeleo @lamont-granquist.

Hot off the presses, have at it!
Would it make sense to allow `/`, `+`, and `=` so that a [base64](http://tools.ietf.org/html/rfc2045#section-6.8) value can be used as a token?