Token auth: save user agent as a label to a generated token