API Tokens

This is just a quick brain dump of the plan around creating/using api tokens.

Right now I've thrown up a ghetto token generator in the system.

I'm considering just leveraging Tags as a way to grant access. Tokens can be tagged so anything with the same tag can be manipulated by the token.

Another option is to use something similar to Watches where you can grant access at a given path (either r or r/w) along with a "bulk" interface somewhere.

Again, these are just random ideas. The plan is to get something simple out first and work towards a full fledged authentication system of some kind.

I'm keen on API tokens because they're easy to work with and can be easily revoked.