token login

For some reason I didn't implement this when implementing the rest of the token auth stuff, but, here it is now.