Token authentication for Chef Server

Ping @smith @seth @mmzyk @danielsdeleo @lamont-granquist.

Hot off the presses, have at it!
Ah. In that case, the wording "generated...from their username and password" should be cleared up.