TokenAuthentication doesn't allow logged-in users to pass through

Token authentication should allow logged-in users from taking advantage of the browsable API feature by checking if the user is logged-in. In that case, get or create the token and let the logged in user pass through the process.