added TokenResource to tenant API, and completed on_post method