https://polynomeer.github.io/posts/token-authentication/