authenticateToken is now database driven.