Web interface to get all unused tokens

Fixes: #60 (closed)

Note most of this feature was already implemented by #56 (closed). This only ensures the tokens come out in a particular order which is convenient for backup/store purposes.