API endpoint for pairing

The pairing endpoint should:

• Check that the auth token provided by the client matches the one in the DB
• Reject the token if it doesn't match, or if there's no unused token in the DB
• Generate, store and return an auth token for the owner

Depends on #42 (closed).