User prebuilt token auth