Add proper OAuth support to the API

[tyzoid]

Support the creation and management of tokens via the JWT standard.

[tyzoid]

So the changes with the API Auth handling allows for custom auth handlers, this would be to write a default, configurable handler for OAuth.