Adding token redemption to controller.
Changing 200 to 303, so direct links work.
Adding ownership tokens.
Implementing create, list and delete of tokens.