Changed login to token based login so each request must provide token which will then be authorized