* ui: Handle new token self response object when ACLs are disabled.
The ACL self lookup now returns a spoof token when ACLs are
disbaled, rather than an error. The UI needs to be updated to
handle this change, so permissions checks are not performed which
grey out buttons such as client drain incorrectly.
* changelog: add entry for #25881