Moves auth token field from User to Authorization
Add api token auth.