passing application_id and api_token as credentials