Token authorization with login and logout