replace user authentication with project token