migrated apitoken auth to a mauth style approach just with symetric secret key