Add token logging

[bjendres]

It would be hand, especially for debugging, if the accepted/rejected tokens could be logged.

However, this should -of course- be restricted:

• only when turned on
• in a separate log file (not CiviCRM log)