mod_http_admin_api: Tweak token session to please module:may() module:may() checks for type == "c2s", but mod_tokenauth does not currently include that or most common session properties. Fixes a traceback resulting from a different code path where module:may() tries to index event.stanza, which does not exist for http events.

---
summary: Log a message once per minute
...

This module sends `-- MARK --` to the log once per minute. This may be
useful to give a sense of how busy the server is or see that logging and
timers are still working.