using Puma for production too.
fix api access with token.