Use custom token instead cookie