Token auth: fix token requesting, set output layout to hash
Authorization: test for params with names as String as well