Add Changes API support

[jbuckner]

Part of #35. The Changes API returns items that changed since a token, for keeping a local cache in sync. Note it requires S3 keys, so this depends on the auth layer in #36 (issue #35 currently lists it under no-auth; it isn't).