The Designer API should self-generate tokens for external use.
The idea is that if developers don't wish to require users to authenticate for API requests, such as file uploading via the Data API, the Designer API should generate those tokens. Since the user has already installed the app, this inherently auth...