add token_auth_enabled decorator