Service account token authentication