Using token instead of basic auth