add a very basic token identification mechanism

[paulbrie]

for test purposes, I would like to limit the access to the API to users that have a token. This should be hardcoded at this stage.