Change to use token auth

[gaand]

• Map to rails auth scheme
• Make using curl easier/clearer
• makes session mapping less obscure

[gaand]

This may require writing a http-token strategy for passport.