Added the ability to pass a token (UUID) in the URL to log a user in.
An NFC card can be encoded with a URL that can log the user in when scanned.
This is a hack and is a security hole, suitable for demo only.
When logging in with NFC a pin is now required.