api: register generateApplicationToken handler as an admin handler

Closes #388.
auth: return the token in CheckTokenApplication function