Add tests for GET query parameters
Refactor auth to use token instead of ip domain check
Add extra check for auth success