Fixed auto-gen token problem, and search all

Before if you left token blank it would create a new token with a random
token, but since the client-side didn't know the generated token it
couldn't assign auth to the item. Now it uses the response to assign
access. Also an empty search bar shows all notes