Move to 'new' scoped tokens for task authentication

Fixes #58