adding token authenticate