AuthenticationTokensObject POST "token" returns plain text for JSON response

The AuthenticationTokensObject defines the return type as 'application/json'.

However, the createToken POST endpoint returns an unescaped string (a UUID, it is not valid JSON).

Unable to use the endpoint from web applications because the parsing on the response is broken.

The response should send valid JSON.