Add api token authentication