BBSAUTH now only needs token