🔒 [C02 & C03 & C04 & C07] Secure `claimInputTokens` and `withdrawTokens`

[transmissions11]

1. claimInputTokens doesn't check that inputTokenRecipientData has a recipient so anyone could burn a request's input tokens

2. claimInputTokens doesn't update inputTokenRecipientData.isClaimed

3. withdrawTokens doesn't set inputTokenRecipientData.recipient, which means a request with tokens withdrawn isn't picked up by areTokensRemoved (as it checks if the recipient == address(0))

[coveralls]

Pull Request Test Coverage Report for Build 912452761

• 0 of 5 (0.0%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage decreased (-0.5%) to 22.472%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
contracts/L2_NovaRegistry.sol	0	5	0.0%
<!--	Total:	0	5	0.0%	-->

Totals
Change from base Build 872426476:	-0.5%
Covered Lines:	24
Relevant Lines:	124

---

💛 - Coveralls