Token usage should be controllable

[maxswjeon]

Token should be able to restrict usage by request origins. For example, token usage should be able to be restricted to used only from specific IPs or services (like GitHub).