Updated some permissions
Added redirectIfNotInternalAJAX method
Updated user controller to call this method
Updated tools to use redirectIfNotInternalAJAX
Updated user controller to return json of invalid request for index rather than redirect
Added redirect if not internal on welcome controller
removed CI property from plain model
Update plain controller to use isAJAX instead of isInternalAJAX for response type
Added isChromeExtension to plain controller
Corrected error handling for tokens model and usage.
Fix to handle passing empty $tokenValue to useToken method
Added timeline in with styles and link count and correct link source
Merge branch 'release-v0.5' into 37-main-redesign