add insales api, working insales authorize