fixed bug that allowed backspace key to delete readonly tokens

delete_token method wasn't checking if a token was readonly before deleting, so a user could either delete the token with the backspace key or by using the remove method `$("#demo-readonly").tokenInput("remove", {id: 11});`

That has now been prevented by making delete_token check the readonly status of a token