added token authentication and tenants