app management - user can register multiple apps
exposing app token in view