Token auth: create resource property in setup

It may be used only in logout, so creating it when requesting
a token is insufficient.