Create seperate database table for AccessTokens to hide jwt token and tokenId from user

lib/db/tables.js

@@ -8,17 +8,18 @@ module.exports = {
         indexFunction: function(user) {
           return user('adbKeys')('fingerprint')
         }
-    , accessTokens: {
-        indexFunction: function(user) {
-          return user('accessTokens')('tokenId')
-        }
-      }
       , options: {
           multi: true
         }
       }
     }
   }
+, accessTokens: {
+    primaryKey: 'id'
+  , indexes: {
+      email: null
+    }
+  }
 , vncauth: {
     primaryKey: 'password'
   , indexes: {