Clumsy attempt at token auth. Refs EMP-123
Make tokens actually work. Refs EMP-123