Support for user-persisted API tokens