api: add method ClearToken()

As a consumer, we need to be able to clear the token in order to
reauthenticate with username and password.