adds API token requirement