add token for authentication