turned off ajax cache, switched to callback-based template loading

adresses #668
added API for getting tokens by clientid
import cleanup
added view of registration token
moved the API endpoints, made resource tokens accessible too