add token authentication to thrift RPC