Access tokens API - POST a token