[RELEASE] Bugfix and more refactorings

The last release contained a bug where the secret was not generated if missing. This is fixed now.

The backend users settings now use a fluid template too. The token form uses the backend style.

External classes are now loaded with the autoloader.