Move token route into users namespace