Personal access tokens

Service-account credentials for any client that calls Airbrx without an OAuth flow.