Validate only one access token is granted per app
Restrict user status text for API user

an api user can only be suspended, locked or active.
Fix edit link for API user

the edit page for a normal user was being
displayed for an API user.