Change client routes to generate `Maybe Token` instead of `Token`

[domenkozar]

This is useful since the user may want to pass no authentication when calling the client, for example when authentication is optional on the server side.