Changed /tokens to /authorizations

/authorizations is a more appropriate name for this endpoint because tokens are
not generated here. /tokens may also clash with OAuth2.0 token endpoint.