Data Model Updates

[jricher]

The data model needs some fundamental updates: clients, access tokens, and refresh tokens should all have internally-generated @id fields instead of using clientId and the token value. Especially true for tokens now that we have long signed JWTs.

This will enable better database usage as well as making the clientId and token values mutable in a more RESTful manner. The application and API will refer to everything using the internal token identifier as its handle.