api token expiration check
APIToken#has_scope?
add 'all' scope to api token
refactor APIToken#in_scopes?
check api token scope