ADD: token auth for api request