added auth with tokens