Use HTTPAuth if Token is not available.

Close #630