finish token auth implementation
update readme and package json