Add basic token authentication to api