added basic token authentication