Add token auth.

Fixes #7.