Backend public authentication and token management