adding token request to the API
fixing a little issue and leaving commentrs
added header validation for email and password for token request