Separate save/delete links
Allow endpoints not ending in a slash
Get rid of hardcoded endpoints

Get all token/credentials endpoints from the home-doc. Also make sure we fetch
the home doc without a token (it doesn't need auth).
Update fixtures
Token requests need the home doc - update specs

Mock out home doc request in most specs.  Also clean up the endpoints a bit.
But just a bit ... mocked endpoints are still split between prod and sandbox.