added token authentication
added confirmations as api resource
added serializer