A token based auth module