Support Authorization Token and drop use of Sessions