Slight code cleanup, tokens can now be invalidated via Profile objects