added token authentication