Move TokenPassword to API client's requests package