Check if the API token is associated with the current project if any
Basically API tokens can be project specific or project-less. In the
case of project specific, we want to make sure that the API token is
restricted to the project of interest, otherwise it defeats the purpose
of this feature.
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>