Added two ways of doing stateless, token-based authentication