added token based authentication