- Replace `GET /auth/token?tokenId=<tokenId>` with `GET /auth/verify?token=<token>` - Add `GET /auth/tokens/:tokenId` - Replace `/auth/revoke` with `DELETE /auth/tokens/:tokenId` - Ensure tokens returned from `/auth/tokens` and `/auth/token` are the same