Add token generation to user, document and annotation controllers.