Fix #45: don't send tokens to deckstats.

Apparently Cockatrice did include tokens in the `cards.xml`; the ones in the duel decks and so on. However, the code has only one sense of token: the kind which goes into the token database. I've tweaked that a bit to get the expected behavior.

Here are the changes:

  * Made the new Oracle actually include the tokens in `cards.xml`, to be consistent with previous behavior.
  * Relaxed the restrictions on inserting tokens into the regular database, since that's supposed to happen.
  * Prevented sending tokens to deckstats.