started to add token auth stuff
more to come