Why all these different methods of authentication? I see tokens, basic auth, and cookies. Can we just limit it to one method?