How to create, use and delete a permanent API token