rework app token authorization, update bulk poll api call