API parameter "createTime" is now used by the join url.

API parameter createTime is now used, internally,  in join urls.

refs #722
You mixed the tests for `createTime` with the tests for `configToken`. Try to make them separately.
You can use `hash_not_including` here to make sure the `configToken` is **not** set. The other values on the hash don't matter.
Then in the tests for `createTime` only you can do the same: one that checks that the `createTime` is set and another that checks that it isn't set.