token authentication added for authorization server back office
web config merged