system now uses an authentication token instead of sending the username and password for every call