Add support for creating tokens and sessions via REST controller