feature: token

use IAM token if present