This is the UI counterpart of #168. The following should be implemented: * Control the lifecycle of tokens in an API section in the settings. (Currently there are Account and "Danger" Settings.) * Add `API` to the the settings sidebar