add in token authentication and bootstrap