add more feature for client side, token_authentication for API