Refactored authentication. Every user now has only one token. It's now also possible to revoke a token by setting AuthToken.active to false.