Create and validate API tokens