Paypal tokens

Should set unique: true, otherwise we allow multiple entires for the same token value and the logic in the query method is not sound because you'd get "randomly" chosen one.