Token-based security for api calls.