basic token auth scaffold for future reference