added new RESTful calls for adding and removing device tokens, removes should be done on logout, logouts should not succeed unless response is 1