Use a token-based authentication