Always using tokens for djatoka authentication