Add token authentication