Add the ability to send JWT token with requests to custom data sources and channels (when and if such things are released)

Also has to support managing the lifecycle of a token: refresh when needed, notify on expiry, etc.