Moved auth token generation and verification code to `common`

[Nydauron]

Moves all token code out of gateway and auth and into common to allow other services to use said functions if necessary.