Allow http token authorization to set token_authentication_key in place of passing it in via params

It will not override existing token_authentication_key params if they are present.