Authentication method

[guilhermelawless]

The current authentication method requires services to store their user+password combination in a config file. There are many alternatives, the most interesting is probably token-based authentication:

1. Service asks for a token with their user+password combination. Token is valid until revoked either by the server or service.
2. Use an open standard like JWT to retrieve time-limited application tokens, valid for e.g. 1 hour. This is then the authentication sent for every work request.