Remove authentication tokens from user model

These are leftover from the simple-token-auth days.