SECURITY: Prevent tokens in jsonp mode

Add checks to token-returning functions to prevent returning tokens in
jsonp mode. This affects action=tokens, action=login, action=block,
action=unblock, and action=query&list=deletedrevs.

Bug: 49090
Change-Id: Ibeaa5c72d8084585092b15935a3f5709104bf7f7