added http token authentication method