Fixed token-based authentication, admin token added to request.
Authentication with specific scope now works.