Sign and authenticate API tokens