Authenticate only with token for api