Changes

The single-use Account Token can be traded in for either a Signing Token or a Reset Token. Once used, the Account Token becomes invalid. The Account Token will also expire after a while (probably a few minutes to an hour). Each account will have just one Account Token valid at any given time. (We do not expect two devices to access the account so simultaneously that this becomes a problem).

=== Getting the Signing Token ===