add api_token as config option