Allow Anyone Delete Token

[vcai122]

This feels a little bad. The assumption we are making is that people will not get ahold of someone else's device's notification token.

But the worst that could happen is the attacker can hijack notifications sent to the device. The attacker will never get ahold of notifications actually meant for the user since users must be logged in to become associated with a particular token.

TODO: add test in later PR

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 88.49%. Comparing base (b1a8bfa) to head (b036cce).
Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #330      +/-   ##
==========================================
- Coverage   88.52%   88.49%   -0.03%     
==========================================
  Files          67       67              
  Lines        2762     2765       +3     
==========================================
+ Hits         2445     2447       +2     
- Misses        317      318       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

---

🚨 Try these New Features:

• Flaky Tests Detection - Detect and resolve failed and flaky tests
• JS Bundle Analysis - Avoid shipping oversized bundles