Modified token auth behavior. Reversed logic, token is checked against IP and not viceversa