implement token-based authentication api foundations - 20F -