This is not documented but a servlet exists to inject a token the syntax is as follows
https://[hostname]:[port]/portal/jsp/inject?bpdInstanceId=[INSTANCE_ID]&action=i&flowObjId=[OBJECT_ID]
this will inject a new token at the specified Flow Object ID