authenticate via token
removed auth on Leads controller
fixed typo
testing