Typo in api_token_auth