Migration: create bearer tokens / remove users

A migration that
 - creates new bearer tokens for datasets that do not have
   them so the upload app is able to use the write api
 - removes users from having access to upload to datasets that should be
   collected only