Create ActiveToken module

I would rename `shaify_token` to `hash_token` or similar. It's obvious now in context, but in 6 months we're gonna be wondering what the hell a "shaify" is and why we have a token for it.