add new endpoint for testing token auth