add simple token auth based access control for API calls