Support simple token authorization