extend oauth access token type
generate api token as oauth access token
link oauth access token and api token
set api token expires_at and scopes
simple api token format