What are the differences between GET, POST, PUT, and DELETE HTTP methods, and how do you handle authentication tokens in API testing?