Mobile API Tokens

[ffugly]

Need API tokens to actually be secure.
Need to be able to login to multiple devices with multiple valid (and separate) tokens

//- see models/User.js
... 
  , createToken: function(callback) {
    console.log("creating a user token");
    var token = User.encode({username: this.username});
... 

...
  , removeToken: function(callback) {
     //akin to 'logout' for api tokens
     console.log("REMOVE TOKEN CALLED");
     this.apiToken = null;
...