Bootstrap Token

Fallback for ops/testing when cookie auth is unavailable.