Token-Based API Authentication