Support new auth based on token only.