$behaviors['authenticator']['class'] = QueryParamAuth::className();
$behaviors['authenticator']['tokenParam'] = 'token'; //- по умолчанию access-token
// меняем get параметр access-token на token
//
https://mysite/api/init?token=FFFF70it7tzNsHddEiq0...