added api_token generation