removes need for client id and secret. will use token to make authenticated calls