added read-only API token to bypass rate limiting