Authenticate by token