add warden for api token authentication