Reworking authentication logic to include required security token within signed headers.
Made security token optional, depending on if present, or not.