Eliminate initial AJAX request to login server

Instead of making an AJAX request to action.php?act=upkeep, this
commit now includes the initial token directly in index.php.