#488 Refactoring user management of granted permissions (access tokens)