Simple Speedy Token, License Goof

* Simplify auth token even further: there's _no reason_, once a valid
    token payload has been generated and returned to the user, to hit
    the database for validation, _ever_. So don't. Faster, still secure.
* Bring tests in line with new strategy.
* Add missing section to LICENSE file.