Consolidate HTTP methods in TokenResource

During the new token management UI creation, the enable/disable methods changed from POST to PUT. However, the revoke operation is still a POST whereas it should be a DELETE operation.

Other than this, I think all API endpoints should be investigated and changed their HTTP method if needed.