Allow logging in using token instead of password