store tokens in json
add auth and token endpoint links