Token authentication (cozy-controller)