Sumada Kaabaha: token authentication