Add "location" usage for auth tokens + API to list them (without the tokens)

[T-Dnzt]

We should store as many information as possible on where a user is logging in from. Those should be stored with the auth tokens. We also need an API endpoint to list the auth tokens for a user, as well as one to delete them.