Make stricter distinction between password and app tokens

crates/store/src/auth/middleware.rs

@@ -70,7 +70,7 @@ where
                 let user_id = auth.as_ref().user_id();
                 if let Some(password) = auth.as_ref().password() {
                     if let Ok(Some(user)) = auth_provider
-                        .validate_user_token(user_id, password)
+                        .validate_app_token(user_id, password)
                         .instrument(info_span!("validate_user_token"))
                         .await
                     {