Use basic auth for every request if no token

* Add current_user helper method