Add API token authentication