Added support for query string access token (similar to many public APIs) for authentication by user