list tokens of user with master access