further implementation of token auth