Token auth for securing the API using a shared secret token