API Reworked token management

Generated API token now only exists in the CMS view for the life of the
session, and only the hash of the token is stored in the CMS. A regenerate
checkbox is included that once triggered will continue to display the token,
but only until the user's session is cleared.