Add `clear` to Token to allow forgetting

Makes it easier to implement "logging out".