add auth_token authentication stuff