Each connected app should have a unique API token. Aside from security implications, it's also just easier to manage this way.