improved & upgraded token.js to latest Kernel :
* by default request.bin is not used anymore (rather does a browser-like login
   and parses redirect Location response header),
* separated app from dc id & secret,
* upgraded Kernel (redirect_uri checks)
* added test & tokeninfo requests, better debug (checks authorize case) & doc
added debranded config, LGPLv3 license & README.md