Package server implements an HTTP handler that either delegates authorization of a token/cluster combo to a remote server via API or performs a simple stub authentication locally.