Issues for Token authentication