[Issue #7] Search tokens by user and client application