support authentication for private shock data access (token passing model)