Load flask principal permissions even for web and api endpoints.

data/model.py

@@ -50,6 +50,10 @@ def verify_token(code, namespace_name, repository_name):
   return None
 
 
+def get_token(code):
+  return AccessToken.get(AccessToken.code == code)
+
+
 def change_password(user, new_password):
   pw_hash = bcrypt.hashpw(new_password, bcrypt.gensalt())
   user.password_hash = pw_hash