require api token to be set