add DELETE /token/$username/$tokenKey API