Pass-through documenting code
Refactor out token secret setter

This is a minor refactor whereby secret can no longer
be set on Token instances, but rather must be passed
on to their constructor.