removed wrong filter for buy_post and token_hook. Removed unsafe code, i...

...mproved loading and checks #189
second parameter was nowhere used, so i removed it. is this part of the wordpress-plugin or of an external library? if extern: why isn't it in the "vendor"-dir?