Use assethost read_only_token in JS file
Use a separate KPCC Private API token
Use KPCC Private API token for deploy notifications
Merge pull request #165 from SCPR/safe-api-tokens

Safe api tokens
Merge remote-tracking branch 'origin/master' into embeds