added token based security