Controller tweaks; expose token api
Set angular "boot" objects, including password reset token