Added token based authentication protocol

Make sure you change $API_SECRET. Instructions on generating the token
are in the comments.