removed 'register' action - scope model creation is not authentication business
moved token crud to separate class. added token check to hook in webmate::application