The pairing endpoint should: * Check that the auth token provided by the client matches the one in the DB * Reject the token if it doesn't match, or if there's no unused token in the DB * Generate, store and return an auth token for the owner Depends on #42.