Token endpoint

This is the access token grant point. It's not actually needed for IndieAuth requests, but for later MicroPub implementations.

Can be registered on a user homepage with:
<link rel=token_endpoint href='https://fossil.include-once.org/freshcode/ext/token'>