api first step
Implement token-based authentication API base