Fixed: Moved log-in view to views
New: Authorization tokens can be deleted

This way, users can be "logged out" globally.
Fixed: Creating an auth token returns HTTP 201.