Allow request with token