rlm_rest: Authentication by token?