Add a configure check for strtok() and add locks around its use

Add a configure check for strtok() and add locks around its use

If strtok() and locks aren't available, let get_last_url()
fall back to the old check-decoded-url code. Compiling with
the old cold will cause some not-yet-committed regression
tests to fail.