Allow creating API tokens not linked to a particular project
This is most useful API tokens with ACLs such as 'create_project' which
up until now required you had a project to get an API token with the ACL
to create a project.
The list of ACLs allowed for project-less API token is defined in the
configuration file.