went for simple token base authentication