Remove token privilege

Don't need the token privilege. Just let admins give out tokens if needed.