Add initial support for OAuth2-style bearer tokens.
This allows a bearer token to be specified in the GFAL configuration or provided through the credential setting mechanisms. If a token exists, it is preferred over GSI authentication.
With this, third-party-copies can be done solely via bearer tokens.