Use a where query to find API tokens.

This is possible because of a secondary index on the api_tokens
DynamoDB table.