More API stuff. Lots of bleh. Really boring
Also need to figure out a somewhat generic way for "requires ownership"
permission and then a combinator for permissions
- Added placeholder funcs for access tokens
- Moved an error definition and added another constant
- Changed (passkey) auth fail to return a json error for now
- TODO: Change that into checking for a provided access token before
failing
