Changed to token authorization