Story | Enable API Token Authentication for MeMaS

[maxyu1115]

The core memas server does not contain any authentication right now, it trusts whoever the requester claims they are. (The namespace_pathname aka user name)

However, even if we don't authenticate caller namespace_pathname, we should at least authenticate users so we know they are allowed to access MeMaS, not some random person on the internet.

Hence, we'd like to enable API Token Authentication for MeMaS, to grant blanket access to those that are allowed to call MeMaS APIs.

(It'd be great if we have separated chatbot API token and admin API token, but this is a plus.)