add ability to use API tokens