Stupidly simple use of tokens for auth