Fix token auth