* commit 'fb37bb67ec8ec2180e7afb51e748a7f56cabae23': Don't allow non-authorized apps to access auth tokens