Using app token to authenticate