- Allow NPM upload to use Job tokens
- Modify token matching to delay raising
  exception so that all methods are tried
- Change job token matching to include oauth bearer