add token based authentication, generate also refresh token, add actionHandler, authenticationHandler