Support for providing an ACL token in a request