Allow creating and manage user access tokens

It's already possible to access the API using a token, but there is no UI to let users manage those tokens, and they can only be obtained through an OIDC authentication.