User API tokens
Add to Dashboard > Profile a menu for API tokens. It is visible to all users and shows all tokens they own in a table (same as what Admins see). Users can remove the tokens they own. The + FAB should only be available to VETTED_USER role and allow them to create a new token.