Handle auth tokens (only basic oauth for now)