Approve API action

This demo runs against mock backend. One time token that it returns is invalid.

The test is successful when you see a message that the token was not found.