Check if the token is for this project, even on optional token API endpoints
    
    Optional API endpoints do not require an API token to be queried, but if
    the user provides one, we should make sure it is a token that is valid
    for this project.