token usage validations

[rvcas]

• cannot call detach without eventually calling burn or attach
• if you call mint, you must eventually call burn or attach