enabling application-only authentication
including token_type in token
#5 resetting default routes
+ example: application-only auth