Token decorator for simple auth