Move token authentication into a concern. Syntax error to fix tests; drop all the commas!