Populate RestockForm in a static fashion, otherwise the init_db script fails because it imports app which depends on forms.
One-Time-Tokens for single signup permission management. Token generation in the UI still needed.