api: working auth api decorator
api: implement management token apis, new table api_tokens(user_id int, description varchar(30), token varchar(50) not null)