create tokenreviews

Lets you validate or brute-force guessed bearer tokens by checking each against the API server's TokenReview endpoint.