added basic and token auth for demo