Clearer intentions for using token auth