+ added token based authentication, + added api_key resource