added token to put and delete requests as well