Provide a way to update the permission of a token

[ikhoon]

Currently, if a token is created with User or Admin permission, there is no way to update the permission with UI or API later.

Users have to deactivate the token and create another one. That process needs a lot of effort because they have to check all token usage and replace them with new ones.

It would be helpful if we provide an API to easily update token permission.