added authentication via token