creat tokens controller
add auth token