global: add authentication module

[jbenito3]

I guess OAuth could be the right choice.

In such a case, should the OAuth registration and claimant subscription information be two different processes? or should they be part of the same registration flow?

[lnielsen]

See https://github.com/inveniosoftware/invenio-oauth2server and https://github.com/lepture/flask-oauthlib