vault

Merge pull request #612 from hashicorp/f-cubby

Directly pass the cubbyhole backend to the token store and bypass logic in router

Move more cubby logic outside of router into auth setup

Cleanup; remove everything but double-salting from the router and give

Add documentation for cubbyhole