token auth to plugins