TEST: Added separate "/auth/token" API