adds token authentication