add apptoken with ticket auth