updated security by only allowing posts and gets of phi data with a token that is set on the phone