Basic token middle without an authenticate method