Add /api/token to get token info

Same disclosure as /token