An authorization token is required.