Comment 2 for bug 933786

Termie, Dolph, Joe Heck and myself discussed this on 2/16 and determined that the best solution is to restore the special-cased admin behavior for the essex release, and to fix this at the API level in Folsom.

The crux of the argument is that if you're listing the tenants for a token, the API should look like GET /tokens/foo/tenants/, not the current call to GET /tenants/ with the token as a header. The specific details will be hashed out at/after the design summit.