Set and authorize with passwords, use tokens for auth