add token configration
add signature check