Add Token auth endpoint and authorization