Auth Server Profile Token

Auth Server update to allow only Profile Server may create credentials