Manage Access Tokens

[pbrudnick]

The access tokens (aka AT) belongs to a group and we should be able to set different groups (or directly an access token) to a Lambda.
The AT has to be hashed and displayed only one time (after creation).
The group/AT can be revoked (deleted)
The AT should be passed in the different executions. (i.e: header or query params)