Page Comparison

...

has to be used to login with API token. Each generated API tokens by the user are related to the user.
The API token will be shown only once right after generation. The API token description should be stored to identify the token in the list. In case the user will change the password - all API tokens of the user will be deleted. The login by the user's API token will be impossible after the deletion of the user.

Example: