Widget tokens and allowed domains in Converla

Widgets are limited by token and allowed domains. Rotate the token if a domain is compromised.