REST API token based authentication