add apitom authentication