Token auth works.  Tested