added token-based authentication API base
added xml support for api v1