Added XAuth AuthToken subclass

Allows for passing a pre-authenticated XAuth token in
Avoids persisting credentials in session