added token auth
added token based security to all secured controllers