Remove direct model reference from token cell

This breaks password updates
Decouple token and token cell, using the controller to manage cell updates
Handle manual password updates through delegation
Replace animation timer with a display link
Update visible passwords on display refresh
Locally retain token cell delegate for the duration of its use
Merge branch 'token-cell'