simple authentication with token implemented