mod_http_admin_api: Tweak token session to please module:may() module:may() checks for type == "c2s", but mod_tokenauth does not currently include that or most common session properties. Fixes a traceback resulting from a different code path where module:may() tries to index event.stanza, which does not exist for http events.

--% conflicts: mod_bookmarks
module:log("info", "mod_bookmarks has been deprecated, now loading mod_bookmarks2")
module:depends("bookmarks2")