Will only grant access with token parameter