I\'ve been researching the different ways of granting users API access to my application & it seems there\'s a strong consensus that every user should be given an access tok