api: remove token-owner stuff

This was not a really good idea :)
misc/git-hooks: remove Token-Owner header