Document general API usage
Ensure TokenUser.permissions is a set
check type of u.permissions, just to be sure
Merge djmitche/build-relengapi:tokens-issue-tokens (PR #168)
Merge djmitche/build-relengapi:issue155 (PR #155)