add token to api calls