Add a token based auth