v2.5.1: Prevents token limit check bypass

Makes the token limit check optional in the saveToken method
and defaults to enabled.

This prevents bypassing the token limit check by setting a
parameter to false.

Also, ensures only unused tokens are considered when checking
the token limit.