Validate the API Token has the Download Kits scope before saving

[mlwilkerson]

The access token response will include the token's scopes. That could be used to validate that the API token has the Download Kits scope on it. If not, it could warn the user, or even refuse to save that API token and return an error.