Supporting authentication via token