api token now required in the begaining