Only authenticate with the token

The username is not needed as a token is unique.