changed token based authentication