Information leakage in admin panel

[anx-ckreuzberger]

Same as with Issue 6131 on django-rest-frameworks (regarding Token Authentication), this package uses the auth token as the primary key.

An administrator clicking on a token within the admin panel will leak that token into one or many logfiles. E.g.:

• access log of the webserver used
• any proxy that logs
• webbrowser history
• any django log, depending on your django.requests or middleware logging

[anx-ckreuzberger]

Fixed with commit 7e11ed606271eff0693a9280f8a30349c7e90b27 and release 1.3.1