Implements API token for users. related to #940
auth/api: implements api token interface and validade with AuthTokenMiddleware