added token authentication for API