basic auth and token validation
add minjason