token based authentication changes