embed point losses resources in pd records
support auth token requests