add working token authentication