Add token auth and session