Catch unserialize errors in install_check_token_serialization()

Instead of just choking on invalid data when unserializing it (and
possibly display a PHP notice, depending on error reporting settings),
we now catch the error and display a friendly and useful error message.