Token authentication

Let's refactor using Underscore's ```_.each```