finish token auth implementation
update readme and package json
change secret