New bugzilla needs to know whether and where to store tokens as well as cookies.

Set tokenfile to satisfy python-bugzilla.   Set both cookiefile and tokenfile to None by default as this will mean "Do not store cookies and tokens persistently on disk".  That's more secure and probably what we want for a server anyway.
This should probably be `token`