SECURITY: Prevent tokens in jsonp mode

Add checks to token-returning functions to prevent returning tokens in
jsonp mode. This affects action=login, action=block, action=unblock, and
action=query&list=deletedrevs.

Bug: 49090
Change-Id: Ibeaa5c72d8084585092b15935a3f5709104bf7f7