That was easy. Let the save hooks do the work.

Instead of generating the access token with javascript, just send along
a blank one and the callbacks will put a new one into place. Closes #13