What Is Token-Based Authentication and Who Uses It?