Implement access to the API via a token, create a new role that have permission to manage tokens #974