code: @Post("/tokens")
      @StatusCode(201)
      @ResponseConverter(CreateApiResponseConverter.class)
      public CompletableFuture<HttpResult<Token>> createToken(@Param("appId") String appId,
                                                                      @Param("isAdmin") boolean isAdmin,
                                                                      Author author, User loginUser) {
          checkArgument(!isAdmin || loginUser.isAdmin(),
                        "Only administrators are allowed to create an admin-level token.");
          return mds.createToken(author, appId, isAdmin)
                    .thenCompose(unused -> mds.findTokenByAppId(appId))
                    .thenApply(token -> {
                        final HttpHeaders headers = HttpHeaders.of(HttpStatus.CREATED)
                                                               .add(HttpHeaderNames.LOCATION, "/tokens/" + appId);
                        return HttpResult.of(headers, token);
                    });
      }
docs: POST /tokens
  
  <p>Returns a newly-generated token belonging to the current login user.