Add signed token auth. Fixes #2