Don't require token for options request method.
Improved auth and token handling.