Implement single-sign-on, add 'token' endpoint to the Company resource