separate creation and storage of mail tokens

`MailTokenBasedOperations#createToken` only creates a mailer token.

In turn, `handleStartSignUp` and `handleStartResetPassword` are
responsible for storage of the respective mail token.