Token auth with a database of it's own