Cloud/server: App tokens, removing devices

Features
1

Currently, all apps use the same user account password.

  1. User enters e-mail + password in app
  2. App requests a token, doesn't store password

Apps / devices are listed in the WebUI, access can be revoked.

The revocation could also be done in-app, and re-requesting password.

2

It's already token based actually. The password is saved to the keychain for convenience mostly, but it's not used after login.