Using token in API calls