October 19th

# What's New?

 * Eliminated some old TODOs
 * Cleaned out irrelevant / outdated comments
 * Update token authentication to raise exceptions when a user attempts to access a token plaintext secret after it goes stale (instead of using janky string warning messages)
 * Updated API docs

# What's Next?

 * Write API docs in the wiki
 * Chase down that `500.png` error that's happening in production.