Expose client token in state

[picklelo]

Sometimes the event handlers may need to know the specific client that is calling it, to do logic such as rate-limiting.

Each client has a token already, so we can just make this accessible in the state class as self.get_token()