Working /auth endpoint. Returns API token