Switch to token auth for API