Update to PR #1468 - Implemented token auth fallback to cookie or query string for situations where headers are not an option.