added backend token based authentication