Fix race-condition

[lc]

canCreate isn’t in a shared transaction with the insert function so it's possible to create 2 entries with the same token.

Fix: make the token column UNIQUE PRIMARY KEY