Gate scores behind basic token auth