added api token authorization code