Allow anyone to generate a token, restrict tokens to ActivityStreams::PhotosController#create, don't let tokens create sessions.

fixed embedder the hacky way (?) and added cucumber feature for youtube feature so you'll notice if you breakt it again the next time

edited subscribers to include all contacts on public posts.  added the ability to drop an aspect regardless of contacts contained.  wip.

This reverts commit 326155af.