asset-referenced tokens authorisation