add support for /api-token-auth/