setup HTTP-Token-authentication
keep v1
create v2 api
HTTP-Token-authentication