add authorization token functionality